DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
19ec7e87f314c92584ef5e0e7bacb613_JaffaCakes118.dll
Resource
win7-20240508-en
Target
19ec7e87f314c92584ef5e0e7bacb613_JaffaCakes118
Size
852KB
MD5
19ec7e87f314c92584ef5e0e7bacb613
SHA1
b5846e8c9ecef4c56ffcf1656f6d34785ca417ae
SHA256
5aae72afc45d810424954d864e13f4534e260570d9e949a4de5cfdd81b96791b
SHA512
606d18b216d3a1bf0bddae3127ae42ff2f85110d2f8364423b7330b7a310ef83783fa120aa3f810ad130eb2bdbe88c0af615193a2113e1da76e4d4f3d231dc12
SSDEEP
12288:wtv1W0IFGiS5JeprW70QxcPJHRFLL+p6r0k2JC1RW8QqHCqmoRIe6atIo6oC0jLx:8M0PiQ85xRJ+U0Dy0hoRIe6a766l
Checks for missing Authenticode signature.
resource |
---|
19ec7e87f314c92584ef5e0e7bacb613_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ